CVE-2026-112947 | Vitejs Vite/Vite-Plus up to 8.2.3/8.3.2 Wasm plugin load hook vite-wasm-instance information disclosure

October 20, 2026 Yanac

A vulnerability identified as problematic has been detected in Vitejs Vite and Vite-Plus up to 8.2.3/8.3.2. Affected by this vulnerability is the function load hook of the component Wasm plugin. This manipulation of the argument vite-wasm-instance causes information disclosure.

This vulnerability is handled as CVE-2026-112947. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More